Builds from an accepted case and its reviewed, undrifted plan into CCR drafts for railiance-platform's applier, policy HCL, catalog proposal, exact rollback and manifest; the local audit log records case, type and acceptance. Drafts pass the platform's own CCR validator. 6 tests; suite 175 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
28 lines
1.6 KiB
JSON
28 lines
1.6 KiB
JSON
{
|
|
"applier": "railiance-platform credential-change.py applier-apply (founder), after it files the CCR drafts",
|
|
"files": {
|
|
"catalog-proposal.yaml": "8bb3faedca22c7fa995e26978a0f040def032882fb9072b3a818cd40d5ff3818",
|
|
"credential-change-requests/CCR-DRAFT-FORGEJO-NETKINGDOM-OIDC-ESO.yaml": "50940969383a9c7a6a8a3c2d03a0aa6fbed574a12139072b5388402651550b3e",
|
|
"credential-change-requests/CCR-DRAFT-FORGEJO-NETKINGDOM-OIDC-FORGEJO.yaml": "691423c684da31d4611b15adb601f622f89c9cd465b55c637aed0836bb9ac9c8",
|
|
"openbao/policies/workload-kv-read-keycape-forgejo-eso.hcl": "92fa2aa74b6d4254b7b15dd7f376566afdafe5bcfbc9546fa9bccdf8d2214ab8",
|
|
"openbao/policies/workload-kv-read-keycape-forgejo-forgejo.hcl": "690aa95a2ecd7eb906de87af20e3c0905854e14e864a24f4241216afa4bc9c45",
|
|
"rollback.yaml": "b8bc1a3c99507183733a246d415fa5508e0f45590e9517d5a70e48ae73206fc9"
|
|
},
|
|
"kv_path": "platform/workloads/keycape/forgejo",
|
|
"not_ops_mason": [
|
|
"mint-secret (credential broker lane keycape-client-secret-generate)",
|
|
"catalog activation (ops-warden)",
|
|
"client registration (net-kingdom, attended)"
|
|
],
|
|
"security_case": {
|
|
"acceptance_record": "key-cape docs/forgejo-oidc-client-request.yaml (status accepted-2026-10-08, KEY-WP-0038-T01); type acknowledged via informed-decision memo nk-wp-0048-t05-oidc-browser-relying-party-r4, hub decision e418263e",
|
|
"accepted_at": "2026-10-08",
|
|
"accepted_by": [
|
|
"owner",
|
|
"founder"
|
|
],
|
|
"case": "forgejo-netkingdom-oidc",
|
|
"render_digest": "sha256:fb8b114d465341a46bb492259cb9c6b77bc0731670edace2e13a1f58758c6e23",
|
|
"type": "oidc-browser-relying-party@1.0"
|
|
}
|
|
}
|